Wpengine INC Advanced Custom Fields PRO vulnerabilities
5 vulnerabilities
Known vulnerabilities in Wpengine INC Advanced Custom Fields PRO, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2024-37249wordpressadvanced-custom-fields-pro+1
EPSS score0.32%
Missing Authorization vulnerability in WPEngine Inc. Advanced Custom Fields PRO allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Custom Fields PRO: from n/a through 6.3.1.CVE-2024-37250wordpressadvanced-custom-fields-pro+1EPSS score0.30%
Missing Authorization vulnerability in WPEngine Inc. Advanced Custom Fields PRO allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced Custom Fields PRO: from n/a through 6.3.1.CVE-2024-37251wordpressadvanced-custom-fields-pro+1EPSS score0.23%
Cross-Site Request Forgery (CSRF) vulnerability in WPENGINE, INC. Advanced Custom Fields PRO.This issue affects Advanced Custom Fields PRO: from n/a before 6.3.2.CVE-2024-34762wordpressadvanced-custom-fields-pro+1EPSS score0.59%
Vulnerability discovered by executing a planned security audit.
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WPENGINE INC Advanced Custom Fields PRO allows PHP Local File Inclusion.This issue affects Advanced Custom Fields PRO: from n/a before 6.2.10.CVE-2024-34761wordpressadvanced-custom-fields-pro+1EPSS score0.43%
Vulnerability discovered by executing a planned security audit.
Improper Control of Generation of Code ('Code Injection') vulnerability in WPENGINE INC Advanced Custom Fields PRO allows Code Injection.This issue affects Advanced Custom Fields PRO: from n/a before 6.2.10.